Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
File:                     B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft (raw, json)
Hash identifier:          KH+AZSSVKptekgtuP2SmgdnVihdMaY/qceaE+JGfvNI=
Subject key identifier:   9E:1C:24:9D:08:D2:0F:C0:FF:EC:F1:99:10:5A:AE:9B:51:5F:FC:BE
Authority key identifier: B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66
Certificate issuer:       /CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
Certificate serial:       6E5EE0E37A96716F01167B367B90E0E9FDA5C0B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
Manifest number:          0457
Signing time:             Fri 24 Jul 2026 03:30:31 +0000
Manifest this update:     Fri 24 Jul 2026 03:25:31 +0000
Manifest next update:     Sat 25 Jul 2026 05:25:31 +0000
Files and hashes:         1: 3137372e38352e3136362e302f32342d3234203d3e203532373433.roa (hash: CfJSl6S562vYm2soh9kV2iDSBZh+vpMuccN6zqF1Sck=)
                          2: 3137372e38352e3136342e302f32332d3233203d3e203532373433.roa (hash: jwG40e5Av7OuCkdinNTmVHyBUwQ7kPPrIHh5hN0dhrQ=)
                          3: 3137372e38352e3136342e302f32322d3232203d3e203532373433.roa (hash: mcWZkfXu9xnFjE1ymSk14x6r8LbE5gP7O/pxaEjtpfA=)
                          4: 323830343a363566343a3a2f33322d3332203d3e203532373433.roa (hash: yFUriMA3jSl36ZtAYliucTBcvzxvvBGUu31glU6JDdI=)
                          5: B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl (hash: QfGXjWUxy0iRREXqk8lERs+xu01np1ESwcx/b4OGwaA=)
                          6: 3137372e38352e3136372e302f32342d3234203d3e203532373433.roa (hash: FBVHOxBlIERsIkT3RQX3Wn9gA45AfnlFxJolVZZShi4=)
                          7: 3137372e38352e3136352e302f32342d3234203d3e203532373433.roa (hash: rEinrI28PQUJHeEYRJSRy3A+v9MBQS2xjtXZlxP0Xos=)
                          8: 3137372e38352e3136362e302f32332d3233203d3e203532373433.roa (hash: X/zABilIWPFGHFUELdfKj7pP5WyD7RKlaeOSbH1fboA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl
                          rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:25:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:5e:e0:e3:7a:96:71:6f:01:16:7b:36:7b:90:e0:e9:fd:a5:c0:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
        Validity
            Not Before: Jul 24 03:25:31 2026 GMT
            Not After : Jul 25 05:25:31 2026 GMT
        Subject: CN=9E1C249D08D20FC0FFECF199105AAE9B515FFCBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d6:61:a1:db:50:6c:c8:11:5b:09:87:bd:5e:
                    b5:3a:89:cb:08:e0:9a:03:10:54:99:f3:20:b0:37:
                    75:ed:e5:40:55:ff:e3:f6:c0:ed:0d:29:78:71:2b:
                    f2:c4:13:cc:b2:c6:ff:dc:a8:cc:e1:eb:0a:2e:f1:
                    a9:81:f0:c8:2b:2f:b5:1a:f0:3c:08:18:77:72:df:
                    cf:9d:7d:d7:8c:b8:77:c0:19:a3:0a:43:ed:d0:18:
                    90:26:d3:47:6e:57:36:c2:8b:73:32:b9:bf:b8:06:
                    1e:2c:96:56:7a:15:71:5b:bf:5b:9a:aa:3c:69:3c:
                    af:6f:4a:bd:4e:58:f0:c5:90:cd:85:a6:da:1b:5f:
                    3e:ed:b9:db:7e:98:ff:7e:96:d7:81:24:b0:27:c9:
                    81:b6:2f:66:3a:ad:55:58:6e:b5:c3:9c:2a:f0:ab:
                    e6:3b:06:64:6f:8a:fb:7c:28:60:b2:85:ab:de:8e:
                    ab:56:84:1d:00:ac:3b:45:d0:27:f7:56:e1:5d:b2:
                    bc:de:bb:fc:fb:70:10:e1:01:10:0f:eb:8c:cb:24:
                    d4:7e:e4:d6:f1:c8:a8:d6:d3:ea:16:26:f6:04:80:
                    c9:e7:3c:21:5a:68:6a:83:15:44:3e:ec:6a:f9:fb:
                    e2:6f:25:f8:d2:6c:72:6d:1a:77:00:02:d5:81:e6:
                    6a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1C:24:9D:08:D2:0F:C0:FF:EC:F1:99:10:5A:AE:9B:51:5F:FC:BE
            X509v3 Authority Key Identifier:
                keyid:B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:cb:bc:64:be:9b:3b:1d:da:ac:a4:08:01:ad:d4:0a:34:15:
         77:68:e5:a1:43:e1:24:44:44:99:a3:70:23:e5:90:00:b0:f7:
         9c:57:37:5e:af:f4:42:01:00:fb:91:a7:ff:4b:fb:ff:81:89:
         78:eb:5d:f1:c7:c7:78:eb:c0:df:f1:4b:ef:fa:03:47:f4:f4:
         71:54:76:09:a4:71:46:54:42:cc:21:4d:b8:ae:da:d7:d2:88:
         ec:7f:2f:28:0d:d5:6c:75:f4:27:62:99:ed:a1:e3:2a:3c:87:
         3e:a5:e3:07:58:13:36:cf:12:ce:51:1d:86:6d:1f:ac:9a:b5:
         a3:72:e5:71:05:76:43:4d:b6:f9:54:9e:83:d6:f3:9c:ec:7a:
         19:d1:0b:96:b1:ab:91:76:08:11:89:bc:69:09:a4:c1:6b:cc:
         66:dc:86:5b:d0:3b:e0:52:63:63:7b:66:dd:fb:e4:48:df:7e:
         1c:18:e6:a9:00:45:5e:15:8f:32:a8:a0:86:33:1c:7a:c7:a5:
         7b:0d:e0:a7:c4:7a:d6:16:88:b3:70:50:c4:5f:b9:6b:ed:1c:
         66:5b:37:f6:b8:ce:c9:fd:67:cf:fd:eb:39:f6:de:5a:87:a6:
         6b:5f:c8:57:a8:ea:f8:ce:c4:f4:3c:fc:ae:63:f6:c7:a0:e8:
         74:30:45:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:28:56 2026 by rpki-client